Cisco Umbrella

Cisco Umbrella is a cloud-delivered security platform that provides the first line of defence against cyber threats by blocking malicious domains, IPs, and URLs at the DNS layer — before a connection is ever established. By resolving over 620 billion DNS requests daily, Umbrella has unmatched visibility into internet activity and uses machine learning to identify malicious infrastructure minutes after it appears, protecting organisations from phishing, malware, ransomware, and command-and-control callbacks.

Unlike traditional security tools that inspect traffic after it enters the network, Umbrella operates at the DNS resolution layer, stopping threats before any content is downloaded. This approach is lightweight, fast, and works regardless of the user's location — protecting roaming employees, branch offices, and guest Wi-Fi networks without requiring traffic to be backhauled through a central firewall. Deployment is as simple as pointing DNS to Umbrella's resolvers.

Beyond DNS security, Umbrella includes a secure web gateway (SWG) with full URL inspection and SSL decryption, a cloud-access security broker (CASB) for SaaS application visibility and control, and a cloud-delivered firewall for non-web traffic. Comprehensive logging and reporting give security teams visibility into all internet activity across the organisation.

Xcobean deploys Cisco Umbrella for organisations across East Africa seeking an easy-to-deploy, effective first layer of cybersecurity. Our implementation includes policy design, AD/LDAP integration for user-level reporting, roaming client deployment, and integration with existing SIEM platforms.